Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
File:                     3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (raw, json)
Hash identifier:          zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=
Subject key identifier:   29:85:8E:F6:D1:44:C3:42:75:59:46:F2:C3:01:04:49:43:A2:03:8C
Certificate issuer:       /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
Certificate serial:       688D3029118354ADBD0CB2371DDEFD806C7C7A4F
Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
Signing time:             Wed 18 Dec 2024 14:53:55 +0000
ROA not before:           Wed 18 Dec 2024 14:48:55 +0000
ROA not after:            Wed 17 Dec 2025 14:53:55 +0000
asID:                     52677
IP address blocks:        177.66.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8d:30:29:11:83:54:ad:bd:0c:b2:37:1d:de:fd:80:6c:7c:7a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542
        Validity
            Not Before: Dec 18 14:48:55 2024 GMT
            Not After : Dec 17 14:53:55 2025 GMT
        Subject: CN=29858EF6D144C342755946F2C301044943A2038C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:70:f0:23:aa:b3:1d:12:d6:f7:fa:67:3e:
                    e5:5c:a9:6c:2a:3b:77:32:5d:94:9c:b3:8e:bc:6c:
                    d5:75:d5:40:9a:20:b3:39:a9:9f:6a:ce:19:aa:bd:
                    23:7a:cc:7d:5f:b9:2f:b6:8d:ea:4f:07:1a:13:41:
                    43:93:db:44:3a:55:d5:d7:cd:72:a7:77:9a:09:d2:
                    07:cb:14:ec:e0:d5:53:07:8f:0e:39:84:99:a1:07:
                    14:53:61:c3:0b:f5:b4:2d:e9:33:24:8b:27:83:59:
                    a6:73:84:06:4e:8a:34:94:5f:99:6c:8d:ac:89:27:
                    ce:65:6b:b5:b4:9b:eb:01:0b:c4:ad:99:0a:33:91:
                    81:2e:82:a2:59:d9:3e:d6:7f:4d:ee:a3:01:f6:6e:
                    61:20:d9:75:7c:05:6b:0a:1d:ec:a4:c9:9e:3d:44:
                    ba:98:1e:3b:c4:ce:1d:11:bb:80:d2:b2:1b:28:df:
                    b2:a8:ad:7d:de:57:23:67:7f:41:bc:e1:57:3f:89:
                    90:ae:07:90:bc:db:d9:cf:5b:c0:37:2a:3e:69:d4:
                    51:ca:f9:5e:ae:69:7b:be:a8:c4:24:d4:1d:78:7d:
                    ac:1f:48:4a:01:4e:10:88:f7:af:3a:7f:00:3b:31:
                    2d:45:ae:fa:4a:e9:2a:a3:46:0f:01:75:dd:d1:c4:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:85:8E:F6:D1:44:C3:42:75:59:46:F2:C3:01:04:49:43:A2:03:8C
            X509v3 Authority Key Identifier:
                keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:48:21:14:d5:fc:c8:cd:2f:03:c2:13:ff:97:fd:47:75:74:
         11:b8:49:81:65:32:97:46:a0:1f:56:10:cf:ff:98:b8:ce:87:
         f2:5f:6a:51:75:b8:77:fd:7a:6e:8d:50:7f:86:db:77:e7:1f:
         bf:19:21:3f:3a:ee:36:c7:da:87:a9:cd:03:71:b2:ad:d5:b9:
         74:91:59:7e:ab:e3:a2:a5:20:70:4c:b5:3a:a7:24:cb:cf:bd:
         f1:4e:e7:87:ef:a8:6a:bf:5f:63:c9:25:78:72:de:9c:83:2b:
         8a:62:bd:37:60:8b:ce:a7:08:7a:3f:cd:44:95:ef:19:7e:6a:
         59:cf:2f:74:ec:bb:ea:22:95:0e:af:07:4e:05:a1:7c:8b:ad:
         ac:1a:31:1f:5b:91:76:71:f9:5b:a3:d7:fe:16:3c:21:9c:97:
         e6:d4:a2:9d:23:26:87:3f:17:b6:87:47:e8:9d:b9:50:d1:ce:
         67:44:73:65:67:6e:c4:e4:bd:f8:b7:76:9e:62:3b:68:45:02:
         10:bd:6c:55:bf:67:73:41:69:6b:2c:dc:b5:23:a9:f5:31:c7:
         cf:fd:57:86:ab:6d:e3:f0:5f:7e:3d:35:19:92:32:c7:dc:8e:
         89:0b:9b:67:1a:b6:0f:fc:80:bd:65:36:90:fc:2c:d8:10:09:
         40:59:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:35 2025 by rpki-client